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PRE-APPEAL BRIEF REQUEST FOR REVIFW 

Applicants submit the following remarks in support of the Pre-Appeal Brief Request for 
Review attached herewith. Claims 1-5, 7-12, 14-15, 17-18, and 20 are currently pending with 
claims 1 and 11 being independent. The Examiner finally rejected claims 1 and 1 1 as being 
obvious over Windows NT as evidenced by the "Windows NT Server 4 Security Handbook" to 
Hadfield and the "NT Workstation Resource Kit" 

(http://web.archive.org/web/20000831 0441 1 2/is-it-true.org/nt/atips/atips71 .shtml), in view of 
Foster (U.S. Pat. No. 5,652,890). 

The present invention employs authentication indicia that functions as a "reverse 
password" that is used by a computer to authenticate valid password entry screens. The 
presence or absence of the authentication data indicates to the user whether the password 
entry screen is valid. Because the authentication data is stored in a secure memory, it is not 
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possible for a rogue program to spoof the password entry screen. Additional measures can be 
taken to inhibit execution of application programs, such as a video capture program, while the 
password entry screen is displayed. 

Simply stated, the Examiner has ignored the functional language of the claims that 
describes the function of the claimed authentication indicia. Claim 1 recites, inter alia, 
authentication indicia that is used "for authenticating password entry screens to a user." For the 
convenience of the Panel, claim 1 appears below in its entirety. 

1 . A method implemented by a security module in a computing device of 
performing a password-protected secure function, said method comprisinq- 
stonng authentication indicia for authenticating password entry screens to a 

user in a memory of the computing device- 
receiving a command to execute a password-protected secure function- 
temporarily halting execution of programs not needed by the security module 
while the data entry screen is displayed; y moauie 

prompting the user to enter a password associated with the secure function bv 

displaying a password entry screen containing the authentication indicia 
responsive to receiving the command; 

removing the data entry screen from the display- 

^the! d^play te a d nd r ° 9ramS ^ ^ paSSWOrd e ^ screen is remov ed from 

executing the password-protected secure function based on the validity of the 
password entered by the user. vanuuy or me 

The authentication function of claim 1 is performed by including the authentication indicia 
on the password entry screen when the password entry screen is displayed. The 



user can 



differentiate a valid password entry screen from an ifWH iM n, "spoofed" n mr H m „ n 
by the presence of the authentication indicia A valid password entry screen would always 
contain the authentication indicia while an invalid password entry screen would not. 

The Examiner equates the claimed authentication indicia to a user name on a Windows 
NT password entry screen. Specifically, the Examiner contends that the presence or absence 
of the user name authenticates the Windows NT password entry screen as valid or invalid to the 
user. This contention is wholly incorrect and completely unsnnn nrtpH by the cited art. The user 
name on an NT password entry screen is used only to authenticate the user to the computer. 
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It's presence or absence does nothing to authenticate that screen as valid to the user. User 
names are not secure, and therefore, are just as prone to being spoofed as the password entry 
screen itself. A user has no way of knowing whether a conventional NT password entry screen 
is valid or invalid based on the presence or absence of a mere user name. Any assertion to the 
contrary is mere conjecture. 

Indeed, the Examiner does not support this contention with any citation to the intrinsic 
record. Rather, the Examiner simply advances the naked assertion that a user expects to see 
the user name on a password entry screen, and therefore, its absence 'Would alert the user that 
the displayed password entry screen MAY NOT BE AUTHENTIC." Advisory Action, p. 2, HI 4 
(emphasis in original). The references do not even hint that the absence of a user name on a 
password entry screen would alert the user as the Examiner contends. The Examiner has 
simply invented a new functionality for the user name disclosed by the prior art, and then used 
that new functionality as reason to reject the claims. This sort of unsubstantiated reasoning, 
however, is exactly the type of legally improper reasoning routinely rejected by both the Board 
and the Federal Circuit. 

None of the references, alone or in combination, teaches or suggests storing 
authentication indicia in a memory for authenticating password entry screens, or displaying 
password entry screens containing the authentication indicia. The user name entered by the 
user to gain access to a computer authenticates the user to the computer. It is not 
authentication indicia for authenticating password entry screens to the user, nor would anyone 
skilled in the art ever believe a user name to perform that function. Accordingly, the §1 03 
rejections of claim 1 fails as a matter of law. 

Additionally, the §1 03 rejection of claim 1 also fails because the references do not teach 
or suggest, alone or in combination, temporarily halting execution of P r Tm c n , needed by 
the security module while the passw ord entry screen is disntavpri and restarting the halted 
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programs after the password entry screen is r emoved from the dis play The Examiner admits 
that neither of the NT-based references teaches or suggests this aspect, but asserts that Foster 
does. This assertion is also incorrect and unsupported by the cited references. 

Foster discloses generating an interrupt to force a microprocessor in a laptop computer 
to switch in and out of a protected mode. Foster explicitly discloses when such an interrupt 
would be generated. Column 3, lines 31-36 (the same passage cited by the Examiner to 
support the rejection), discloses that a user might wish to leave his system without exiting any 
running applications or turning the system off. However, the user would still want to prevent 
others from accessing the computer. Whatever interrupts Foster does or does not generate at 
this point is irrelevant. The user in Foster is already logged onto the system at the time the 
interrupt is generated. Indeed, were the user not already logged on and authenticated to the 
system, the user would not have to prevent others from accessing or viewing currently 
executing applications. 

Foster does not teach or suggest temporarily halting execution of programs not needed 
by the security module while the password entry screen is displayed, and restarting the halted 
programs after the password entry screen is removed from the display. Neither do the other 
references as admitted to by the Examiner. Therefore, the §1 03 rejection of claim 1 fails and its 
dependent claims fail and must be withdrawn. 

The Examiner also rejected claim 1 1 under §1 03 over the same references and for 
substantially the same reasons as those cited for claim 1 . Claim 1 1 , however, also recites that 
the authentication indicia that is used "for authenticating password entry screens to a user," and 
that a secure processor temporarily halts execution of programs not needed by the security 
processor while the password entry screen is displayed, and restarts the halted programs after 
the password entry screen is removed from the display. Accordingly, for reasons similar to 
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those stated above, the §103 rejection of claim 1 1 and its dependent claims fail and must be 
withdrawn. 



For the foregoing reasons, the cited references do not teach or suggest, alone 



or in 



combination, independent claims 1 or 11. Therefore, the §103 rejections of independent claims 
1 and 1 1 , and of their respective dependent claims, fail as a matter of law and must be 
withdrawn. Accordingly, Applicant respectfully requests that the Panel overturn all rejections 
and allow all pending claims. 



Dated: August 11, 2006 



Respectfully submitted, 
COATS & BENMET)T, P 





in A. Herrera 
Registration No.: 47,642 

P.O. Box 5 
Raleigh, NC 27602 
Telephone: (919)854-1844 
Facsimile: (919) 854-2084 
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